![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
inanedirkI'm back online again.
Bit of a background story:
My ISP is blocking certain ports from being used: 21, 23, 80. A while ago I found out that this is not exclusively to piss off customers and stop them from having http and ftp servers, but also to protect them from hackers. Apparently, the modems they'd delivered to a lot of customers had a security vulnerability. You could access and change their configuration from the internet, and not just from your local network. The config is accessed via a web interface on port 80, or through telnet (port 23 I guess).
Anyway, the only protection is a root username / password, which you can easily google to find out.
So, with this update the vulnerability was supposed to be fixed, ie access to the config pages only works through LAN now.
They're unblocking those ports soon, and sent out an e-Mail asking all customers with this modem to update the firmware.
That's what I tried to do this morning, and apparently shot the modem software instead. Don't really know how I did that, since I hadn't even gotten to the point of actually uploading the new image to the modem. Anyway, called tech support, and they told me I should bring it over, they'll upload a new system for me (which is done through a serial port inside the modem.) Anyway, users can't do that themselves, so they're doing that at their place (which luckily is close by to my apartment. Took like 10 minutes to bike there).
Once there I handed my modem to a tech dude, who went off and a few minutes later came back to inform me that they were unable to upload anything to the modem. Too broken to even do that anymore. So he gave me a new modem instead, with the upgrade already installed. So there's no chance for me to break this one too d;
*nods*
So that's all done.
My bike is a little broken too btw. Need to get that fixed at some point too ...
Bit of a background story:
My ISP is blocking certain ports from being used: 21, 23, 80. A while ago I found out that this is not exclusively to piss off customers and stop them from having http and ftp servers, but also to protect them from hackers. Apparently, the modems they'd delivered to a lot of customers had a security vulnerability. You could access and change their configuration from the internet, and not just from your local network. The config is accessed via a web interface on port 80, or through telnet (port 23 I guess).
Anyway, the only protection is a root username / password, which you can easily google to find out.
So, with this update the vulnerability was supposed to be fixed, ie access to the config pages only works through LAN now.
They're unblocking those ports soon, and sent out an e-Mail asking all customers with this modem to update the firmware.
That's what I tried to do this morning, and apparently shot the modem software instead. Don't really know how I did that, since I hadn't even gotten to the point of actually uploading the new image to the modem. Anyway, called tech support, and they told me I should bring it over, they'll upload a new system for me (which is done through a serial port inside the modem.) Anyway, users can't do that themselves, so they're doing that at their place (which luckily is close by to my apartment. Took like 10 minutes to bike there).
Once there I handed my modem to a tech dude, who went off and a few minutes later came back to inform me that they were unable to upload anything to the modem. Too broken to even do that anymore. So he gave me a new modem instead, with the upgrade already installed. So there's no chance for me to break this one too d;
*nods*
So that's all done.
My bike is a little broken too btw. Need to get that fixed at some point too ...
